[kanneychan]

InternalName : iTunesHelper
LegalCopyright : © 2003-2004 Apple Computer, Inc. All Rights Reserved.
OriginalFilename : iTunesHelper.exe

#:40 [ipodservice.exe]
FilePath : C:\Program Files\iPod\bin\
ProcessID : 488
ThreadCreationTime : 5-10-2005 9:37:22 PM
BasePriority : Normal
FileVersion : 4.7.0.42
ProductVersion : 4.7.0.42
ProductName : iTunes
CompanyName : Apple Computer, Inc.
FileDescription : iPodService Module
InternalName : iPodService
LegalCopyright : © 2003-2004 Apple Computer, Inc. All Rights Reserved.
OriginalFilename : iPodService.exe

#:41 [pphidpad.exe]
FilePath : C:\WINPENJR\Win32\
ProcessID : 3812
ThreadCreationTime : 5-10-2005 9:37:24 PM
BasePriority : Normal


#:42 [msconfigs.exe]
FilePath : C:\Program Files\MsConfigs\
ProcessID : 2448
ThreadCreationTime : 5-10-2005 9:37:27 PM
BasePriority : Normal
FileVersion : 3.40
ProductVersion : 3.40
ProductName : Setup
CompanyName : Setup
InternalName : Setup
OriginalFilename : Setup.exe

#:43 [p2pnetwork.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 3140
ThreadCreationTime : 5-10-2005 9:37:27 PM
BasePriority : Normal


#:44 [hnprrqc.exe]
FilePath : c:\windows\system32\
ProcessID : 1688
ThreadCreationTime : 5-10-2005 9:37:27 PM
BasePriority : Normal
FileVersion : 1, 0, 7, 1
ProductVersion : 0, 0, 7, 0
ProductName : TODO: <Product name>
CompanyName : TODO: <Company name>
FileDescription : TODO: <File description>
LegalCopyright : TODO: © <Company name>. All rights reserved.

#:45 [winampa.exe]
FilePath : C:\Program Files\Winamp\
ProcessID : 4012
ThreadCreationTime : 5-10-2005 9:37:28 PM
BasePriority : Normal


#:46 [msnmsgr.exe]
FilePath : C:\Program Files\MSN Messenger\
ProcessID : 3928
ThreadCreationTime : 5-10-2005 9:37:28 PM
BasePriority : Normal
FileVersion : 7.0.0777
ProductVersion : 7.0.0777
ProductName : MSN Messenger
CompanyName : Microsoft Corporation
FileDescription : MSN Messenger
InternalName : msnmsgr
LegalCopyright : Copyright © Microsoft Corporation 1997-2004
LegalTrademarks : Microsoft® is a registered trademark of Microsoft Corporation in the U.S. and/or other countries.
OriginalFilename : msnmsgr.exe

#:47 [ctfmon.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 3324
ThreadCreationTime : 5-10-2005 9:37:29 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : CTF Loader
InternalName : CTFMON
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : CTFMON.EXE

#:48 [raid_tool.exe]
FilePath : C:\Program Files\VIA\RAID\
ProcessID : 2560
ThreadCreationTime : 5-10-2005 9:37:31 PM
BasePriority : Normal
FileVersion : 2, 2, 1, 0
ProductVersion : 2, 2, 1, 0
ProductName : VIA RAID Tool
CompanyName : VIA Technologies
FileDescription : VIA RAID Tool
InternalName : raid_tool
LegalCopyright : Copyright © 2003
OriginalFilename : raid_tool.exe

#:49 [msmsgs.exe]
FilePath : C:\Program Files\Messenger\
ProcessID : 528
ThreadCreationTime : 5-10-2005 9:43:32 PM
BasePriority : Normal
FileVersion : 4.7.3001
ProductVersion : Version 4.7.3001
ProductName : Messenger
CompanyName : Microsoft Corporation
FileDescription : Windows Messenger
InternalName : msmsgs
LegalCopyright : Copyright © Microsoft Corporation 2004
LegalTrademarks : Microsoft® is a registered trademark of Microsoft Corporation in the U.S. and/or other countries.
OriginalFilename : msmsgs.exe

#:50 [ad-aware.exe]
FilePath : C:\Program Files\Lavasoft\Ad-Aware SE Personal\
ProcessID : 716
ThreadCreationTime : 5-10-2005 9:43:41 PM
BasePriority : Normal
FileVersion : 6.2.0.206
ProductVersion : VI.Second Edition
ProductName : Lavasoft Ad-Aware SE
CompanyName : Lavasoft Sweden
FileDescription : Ad-Aware SE Core application
InternalName : Ad-Aware.exe
LegalCopyright : Copyright © Lavasoft Sweden
OriginalFilename : Ad-Aware.exe
Comments : All Rights Reserved

Memory scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0


Started registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Windows Object Recognized!
Type : RegData
Data : explorer.exe c:\windows\nail.exe
Category : Vulnerability
Comment : Shell Possibly Compromised
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\windows nt\currentversion\winlogon
Value : Shell
Data : explorer.exe c:\windows\nail.exe

Registry Scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 1
Objects found so far: 1


Started deep registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Deep registry scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 1


Started Tracking Cookie scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»


Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley chan@fastclick[1].txt
Category : Data Miner
Comment : Hits:5
Value : Cookie:stanley [email protected]/
Expires : 4-29-2007 8:58:08 PM
LastSync : Hits:5
UseCount : 0
Hits : 5

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley chan@hitbox[1].txt
Category : Data Miner
Comment : Hits:12
Value : Cookie:stanley [email protected]/
Expires : 5-10-2006 12:44:50 AM
LastSync : Hits:12
UseCount : 0
Hits : 12

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley chan@doubleclick[1].txt
Category : Data Miner
Comment : Hits:8
Value : Cookie:stanley [email protected]/
Expires : 5-8-2008 10:15:48 PM
LastSync : Hits:8
UseCount : 0
Hits : 8

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley [email protected][2].txt
Category : Data Miner
Comment : Hits:12
Value : Cookie:stanley [email protected]/
Expires : 6-9-2005 12:26:20 AM
LastSync : Hits:12
UseCount : 0
Hits : 12

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley chan@centrport[1].txt
Category : Data Miner
Comment : Hits:1
Value : Cookie:stanley [email protected]/
Expires : 12-31-2029 8:00:00 PM
LastSync : Hits:1
UseCount : 0
Hits : 1

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley chan@valueclick[1].txt
Category : Data Miner
Comment : Hits:1
Value : Cookie:stanley [email protected]/
Expires : 5-3-2030 11:25:00 PM
LastSync : Hits:1
UseCount : 0
Hits : 1

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley chan@tribalfusion[1].txt
Category : Data Miner
Comment : Hits:1
Value : Cookie:stanley [email protected]/
Expires : 12-31-2037 8:00:00 PM
LastSync : Hits:1
UseCount : 0
Hits : 1

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley chan@valueclick[3].txt
Category : Data Miner
Comment : Hits:12
Value : Cookie:stanley [email protected]/
Expires : 5-3-2030 7:52:12 PM
LastSync : Hits:12
UseCount : 0
Hits : 12

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley chan@serving-sys[2].txt
Category : Data Miner
Comment : Hits:4
Value : Cookie:stanley [email protected]/
Expires : 1-1-2038 1:00:00 AM
LastSync : Hits:4
UseCount : 0
Hits : 4

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley chan@mediaplex[1].txt
Category : Data Miner
Comment : Hits:2
Value : Cookie:stanley [email protected]/
Expires : 6-21-2009 8:00:00 PM
LastSync : Hits:2
UseCount : 0
Hits : 2

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley chan@atdmt[2].txt
Category : Data Miner
Comment : Hits:11
Value : Cookie:stanley [email protected]/
Expires : 5-7-2010 8:00:00 PM
LastSync : Hits:11
UseCount : 0
Hits : 11

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley chan@adrevolver[1].txt
Category : Data Miner
Comment : Hits:6
Value : Cookie:stanley [email protected]/adrevolver/
Expires : 1-23-2008 7:15:36 AM
LastSync : Hits:6
UseCount : 0
Hits : 6

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley chan@advertising[1].txt
Category : Data Miner
Comment : Hits:13
Value : Cookie:stanley [email protected]/
Expires : 5-9-2010 12:24:20 AM
LastSync : Hits:13
UseCount : 0
Hits : 13

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley chan@fortunecity[2].txt
Category : Data Miner
Comment : Hits:2
Value : Cookie:stanley [email protected]/
Expires : 12-31-2010 8:00:00 PM
LastSync : Hits:2
UseCount : 0
Hits : 2

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley [email protected][2].txt
Category : Data Miner
Comment : Hits:2
Value : Cookie:stanley [email protected]/
Expires : 5-9-2015 8:00:00 PM
LastSync : Hits:2
UseCount : 0
Hits : 2

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley [email protected][2].txt
Category : Data Miner
Comment : Hits:7
Value : Cookie:stanley [email protected]/
Expires : 5-10-2006 12:44:50 AM
LastSync : Hits:7
UseCount : 0
Hits : 7

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley chan@questionmarket[1].txt
Category : Data Miner
Comment : Hits:1
Value : Cookie:stanley [email protected]/
Expires : 6-30-2006 4:18:38 PM
LastSync : Hits:1
UseCount : 0
Hits : 1

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley [email protected][1].txt
Category : Data Miner
Comment : Hits:1
Value : Cookie:stanley [email protected]/
Expires : 1-1-2038 1:00:00 AM
LastSync : Hits:1
UseCount : 0
Hits : 1

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley [email protected][2].txt
Category : Data Miner
Comment : Hits:3
Value : Cookie:stanley [email protected]/
Expires : 6-9-2005 12:16:22 AM
LastSync : Hits:3
UseCount : 0
Hits : 3

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley [email protected][1].txt
Category : Data Miner
Comment : Hits:4
Value : Cookie:stanley [email protected]/
Expires : 5-11-2005 12:16:42 AM
LastSync : Hits:4
UseCount : 0
Hits : 4

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley chan@trafficmp[2].txt
Category : Data Miner
Comment : Hits:8
Value : Cookie:stanley [email protected]/
Expires : 5-10-2006 12:27:28 AM
LastSync : Hits:8
UseCount : 0
Hits : 8

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : stanley chan@maxserving[2].txt
Category : Data Miner
Comment : Hits:9
Value : Cookie:stanley [email protected]/
Expires : 5-8-2015 12:23:34 AM
LastSync : Hits:9
UseCount : 0
Hits : 9

Tracking cookie scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 22
Objects found so far: 23



Deep scanning and examining files...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Disk Scan Result for C:\WINDOWS
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 23

Disk Scan Result for C:\WINDOWS\system32
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 23

Disk Scan Result for C:\DOCUME~1\STANLE~1\LOCALS~1\Temp\
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 23


Scanning Hosts file......
Hosts file location:"C:\WINDOWS\system32\drivers\etc\hosts".
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Hosts file scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
1 entries scanned.
New critical objects:0
Objects found so far: 23



MRU List Object Recognized!
Location: : C:\Documents and Settings\Stanley Chan\Application Data\microsoft\office\recent
Description : list of recently opened documents using microsoft office


MRU List Object Recognized!
Location: : C:\Documents and Settings\Stanley Chan\recent
Description : list of recently opened documents


MRU List Object Recognized!
Location: : S-1-5-21-448539723-1659004503-839522115-1003\software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use microsoft direct3d


MRU List Object Recognized!
Location: : software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use microsoft direct3d


MRU List Object Recognized!
Location: : S-1-5-21-448539723-1659004503-839522115-1003\software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use microsoft direct X


MRU List Object Recognized!
Location: : software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use microsoft direct X


MRU List Object Recognized!
Location: : software\microsoft\directdraw\mostrecentapplication
Description : most recent application to use microsoft directdraw


MRU List Object Recognized!
Location: : S-1-5-21-448539723-1659004503-839522115-1003\software\microsoft\directinput\mostrecentapplication
Description : most recent application to use microsoft directinput


MRU List Object Recognized!
Location: : S-1-5-21-448539723-1659004503-839522115-1003\software\microsoft\directinput\mostrecentapplication
Description : most recent application to use microsoft directinput


MRU List Object Recognized!
Location: : S-1-5-21-448539723-1659004503-839522115-1003\software\microsoft\internet explorer
Description : last download directory used in microsoft internet explorer


MRU List Object Recognized!
Location: : S-1-5-21-448539723-1659004503-839522115-1003\software\microsoft\internet explorer\typedurls
Description : list of recently entered addresses in microsoft internet explorer


MRU List Object Recognized!
Location: : S-1-5-21-448539723-1659004503-839522115-1003\software\microsoft\search assistant\acmru
Description : list of recent search terms used with the search assistant


MRU List Object Recognized!
Location: : S-1-5-21-448539723-1659004503-839522115-1003\software\microsoft\windows\currentversion\applets\paint\recent file list
Description : list of files recently opened using microsoft paint


MRU List Object Recognized!
Location: : S-1-5-21-448539723-1659004503-839522115-1003\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru
Description : list of recent programs opened


MRU List Object Recognized!
Location: : S-1-5-21-448539723-1659004503-839522115-1003\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru
Description : list of recently saved files, stored according to file extension


MRU List Object Recognized!
Location: : S-1-5-21-448539723-1659004503-839522115-1003\software\microsoft\windows\currentversion\explorer\recentdocs
Description : list of recent documents opened


MRU List Object Recognized!
Location: : S-1-5-21-448539723-1659004503-839522115-1003\software\microsoft\windows media\wmsdk\general
Description : windows media sdk


MRU List Object Recognized!
Location: : S-1-5-21-448539723-1659004503-839522115-1003\software\winrar\dialogedithistory\extrpath
Description : winrar "extract-to" history



Performing conditional scans...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Conditional scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 41

5:46:55 PM Scan Complete

Summary Of This Scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Total scanning time:00:02:35.734
Objects scanned:68633
Objects identified:23
Objects ignored:0
New critical objects:23

[Advertisements]

HElp plz this is to back up my highjack this log incase u need to see it

[kanneychan]

HElp plz this is to back up my highjack this log incase u need to see it

[Kat]

If the person who helps you in the Malware forum needs to see this log, you can link them to it, or give them a new log. Please don't start more than one topic. It can be very dangerous to be getting help in two different places by two different people.